Reduces a script URL to what a bug report needs, dropping what it does not.
A file:// bundle sits wherever the reporter saved it, so its path carries
their OS username; only the protocol and filename survive. Everywhere else
the origin and path are the whole point of the field (they are what shows a
jsDelivr @latest against a pinned local copy), so those are kept and only
the query and fragment are dropped, since a signed asset URL can carry a
token there.
This applies to what the dialog displays as well as to what it copies. The
two cannot diverge: the whole point of the section is to be handed to a
maintainer, and a screenshot of the dialog travels just as far as the pasted
block — so a value unsafe to paste is unsafe to show.
Reduces a script URL to what a bug report needs, dropping what it does not.
A
file://bundle sits wherever the reporter saved it, so its path carries their OS username; only the protocol and filename survive. Everywhere else the origin and path are the whole point of the field (they are what shows a jsDelivr@latestagainst a pinned local copy), so those are kept and only the query and fragment are dropped, since a signed asset URL can carry a token there.This applies to what the dialog displays as well as to what it copies. The two cannot diverge: the whole point of the section is to be handed to a maintainer, and a screenshot of the dialog travels just as far as the pasted block — so a value unsafe to paste is unsafe to show.